Connect public, paid and private patent data with Google Patents Public Datasets

Method for establishing the authenticity of the identity of a service user and device for carrying out the method

Download PDF

Info

Publication number
US7865719B2
US7865719B2 US10204473 US20447303A US7865719B2 US 7865719 B2 US7865719 B2 US 7865719B2 US 10204473 US10204473 US 10204473 US 20447303 A US20447303 A US 20447303A US 7865719 B2 US7865719 B2 US 7865719B2
Authority
US
Grant status
Grant
Patent type
Prior art keywords
device
service
access
password
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related, expires
Application number
US10204473
Other versions
US20030159031A1 (en )
Inventor
Christian Müller
Alexis Trolin
Siegfried Ergezinger
Anita Döhler
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
E-PLUS MOBILFUNK GmbH and Co KG
E Plus Mobilfunk GmbH and Co KG
Original Assignee
E Plus Mobilfunk GmbH and Co KG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Grant date

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/083Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using passwords
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/33User authentication using certificates
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRICAL DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/42User authentication using separate channels for security data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATIONS NETWORKS
    • H04W12/00Security arrangements, e.g. access security or fraud detection; Authentication, e.g. verifying user identity or authorisation; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network
    • H04L63/083Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using passwords
    • H04L63/0846Network architectures or network communication protocols for network security for supporting authentication of entities communicating through a packet data network using passwords using time-dependent-passwords, e.g. periodically changing passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/18Network architectures or network communication protocols for network security using different networks or paths for security, e.g. using out of band channels

Abstract

The invention relates to a process and a device for establishing the authenticity of the identity of a service user relative to a service provider for release of an access authorization (password) for a service using two different data input terminals, a registration server and a message converter.

Description

The invention relates to a process for establishing the authenticity of the identity of a service user relative to the service provider for release of an access authorization (password) for a service.

The invention furthermore relates to a device for executing the aforementioned process.

PRIOR ART

DE 197 18 103 A1 discloses a process and a device for authorization in data transmission systems using a transaction number (TAN) or a comparable password. The known process calls for the following:

    • The user in a first step sends via a data input device his identification and/or the identification character of the data input device together with a request to generate or choose a TAN or comparable password from a data file to the authorization computer;
    • In a second step the authorization computer generates the TAN or comparable password or chooses it from a file;
    • In the third step the authorization computer sends the TAN or comparable password via a transmission path other than in step 1 to the receiver;
    • In a fourth step the user accepts this TAN or comparable password from the receiver and inputs it into the data input device;
    • In a fifth step this TAN or comparable password is transferred again to the authorization computer;
    • In a sixth step the authorization computer checks the validity of the TAN or comparable password in order to then
    • in a seventh step establish or clear a connection between the data input device and a receiving unit.

Furthermore, it is proposed in a prior publication that the TAN or comparable password is used only once. The validity of the TAN or comparable password can be a predefined user time. Furthermore, the validity of the TAN or comparable password can be dependent on a predefined number of transmitted data files. The validity of the TAN or comparable password is dependent on a predefined amount of transmitted data. Access to the data input device and/or receiver and/or receiving unit is password-protected. The files transferred by the data input device to the receiving unit or vice versa are encrypted. The data transmitted by the data input device to the authorization computer or vice versa are likewise encrypted. The receiver can be a pager. But it is also possible for the receiver to be a mobile device. Furthermore, making the receiver as a fax is suggested. But the receiver can also be an E-mail or network address. Furthermore, it is possible for the receiver to be a data output device. Finally it is proposed that a speech output device be used as a speaker or a telephone be used as the speech output device. It is also described that the receiver is a radio receiver which is installed in the data input device and which outputs the TAN or comparable password on the display or monitor of the data input device. The radio can have a user identification element, as it is also possible for the user identification element to be a magnetic card or chipcard. Finally, it is conceivable for the user identification element to be made with graphic means for checking a fingerprint or for image identification of the user. There are matching encryption modules in the authorization computer and in the receiver. The receiver unit can however also be a door locking mechanism.

Moreover it is proposed that the authorization computer and the receiving unit be integrated in one device. The data input device, the authorization computer and the receiving unit can be made integrated in one device.

Other known procedures such as “telebanking” and the so-called “call back system” described in DE 197 18 103 A1 will be made more reliable by the described procedure.

Since the user in the first step sends via the data input device his identification and/or the identification character of the data input device together with the request to generate and choose a TAN or comparable password from a file to the authorization computer, the third step follows which consists specifically in that the authorization computer sends the TAN or comparable password to the receiver via another transmission path, in the fourth step the user accepting this TAN or comparable password from this receiver and inputting it again into his data input device. Thus two different transmission paths are claimed. The authenticity of the user which is of great importance for the service provider is not checked in the process described in DE 197 18 103 A1.

The process described in DE 197 18 103 A1 allows the possibility of a user providing a false identity with the intent of abuse. Abuse possibilities are the following here:

  • 1. A user logs on under a false identity and has the password sent to the receiver.
  • 2. A user logs on correctly. Due to technical problems the delivery of the password to the receiver is delayed. In the meantime the receiver falls into unauthorized hands.

Since the process is based on a valid password being sent to the receiver, unauthorized use of service to the detriment of the service provider or third party is immediately possible.

DE 197 22 424 C1 discloses a process for secure access by a user to a separate system with data stored in a memory device, with the following steps:

Establishment of a first connection between a first communications means and an access device and transmission of the first password from the first communication means to the access device;

Comparison of the first password to the first authentication data stored in the access device;

Establishment of a second connection between a second communications means and an access device and transmission of the second password from the second communication means to the access device;

Comparison of the second password to the second authentication data stored in the access device; and

Release of access to the system with one or both communications means in the presence of a given relation between the first and second password with the second authentication data stored in the access device.

The following steps are also proposed in this connection:

Transmission of the second or third password from the access device to the first communications means;

Transmission of the second or third password from the first communications means to the second communications means;

Transmission of the second or third password from the second communications means to the access device which carries out a corresponding check of the password before access to data is released.

Furthermore, establishment of a connection between a first communications means and an access device and transmission of the first password from the first communication means to the access device is proposed, comparison of the first password to the first authentication data stored in the access device taking place;

In the presence of a given relation between the first password and the authentication data stored in the access device, establishment of a second connection between the access device and the second communications means and transmission of the second password from the access device to the second communication means;

Transmission of the second password from the second communications means to the first communication means;

Transmission of the second password from the first communication means to the access device;

Comparison of the second password to the second authentication data stored in the access device; and

Release of access to the system with one or both communications means in the presence of a given relation between the second password and the second authentication data stored in the access device.

Moreover, a process is proposed which is characterized by establishing the first and second connection via communications paths independent of one another, a data processing device being used as the first or second communications means, and the connection between the data processing means and the access device being set up via a data processing device network. An internet can be used for the connection between the access device and the data processing device. A telephone can be used as the first or second communications means, the connection between the telephone and access device being established via the telephone network. A mobile phone can be used as a communications device. The first or second password can be transferred by pressing a call request key or at least one other key of the telephone. The system can be a GSM network and the memory device can be a home location register in which subscriber-referenced data are stored. At least one of the passwords can be produced in the access device or elsewhere and can be valid for only one access session. Furthermore it is proposed that at least one of the passwords be generated using a subscriber identification and the current time or date. One of the passwords can be used for data encryption and for data transmission between the first and second communications means and the access device. After release of data access at least one additional password can be transmitted from one of the communication means to the access device in order to clear expanded access to the system or to other data stored in the memory device. As the device a system with connected access devices can be used, with a data processing device, via a data processing network, to which the access device can be connected, using a permanently connected telephone, with a mobile telephone which can be connected via a fixed network or mobile network to the access device.

This device produces different passwords in a very complicated manner; they are sent via separate communications means.

WO 95/19593 discloses a computer security system in which the system produces case by case a code A which is transformed, and produces a code B, even a third code being generated which is to be compared to the second code and access is only released when the second and third code agree.

OBJECT

The object of the invention is to devise a process for release of access authorization based on checking the authenticity of the identity of a service user according to the assumed type. The process is intended to allow the service provider the security of releasing access authorization for service users whose authenticity has been checked.

Furthermore, the object of the invention is to devise an advantageous device for executing the process as claimed in the invention.

Achieving the Object Relating to the Process

This object is achieved by the features listed in claim 1.

Some Advantages

In contrast to DE 197 18 103 A1, in the invention the identification is sent to the service provider via only one for example secure connection, while the provider sends back the initially still invalid password or the like to the user via the same connection.

The process can be used when access authorization for the use of a service is to be released by the service provider only if beforehand the authenticity of the identity of the service user has been checked with high certainty. Checking the authenticity of the identity of the service user and linking the release of the access identification character to this check greatly reduce the possibility of abuse by providing a false identity.

Misuse is only possible when the terminal device at the time of registration is already in the possession of an authorized party.

OTHER INVENTIVE EMBODIMENTS

Other inventive embodiments are described in claims 2 to 8.

Limitation of the time interval in which the initially invalid password can be used in order to authenticate the service user further increases security by forcing the service user to authenticate himself in the indicated time interval. Authentication after expiration of the time interval is not possible, the service user must re-register in this case and then receives a new invalid password—claim 2.

After the service user has been successfully authenticated and the password has been released to him by the service provider, it will be possible for the service user to change the password at will—claim 3.

To increase security, there is the option of limiting use of the valid password such that the password remains valid for only a predetermined number of uses. When this number is reached, the password is automatically invalidated. Validity is only re-established by the service user again authenticating himself using the process described in claim 1-claim 4.

Encryption offers the service user the advantage that his personal data, for example bank account, credit card number and the like, are not intercepted without authorization by third parties—claim 5.

Encryption offers the service user the advantage that the invalid password and other information of the registration server are not intercepted without authorization by third parties—claim 6.

The GSM standard has high-security methods for ensuring the authenticity of a mobile user. Therefore the transmission of data from the terminal device to the message converter is well suited—claim 7.

To establish identity in the ISDN the so-called “calling line identification” can be used which, according to the prior art, is also used for other purposes as an identity feature—claim 8.

Achieving the Object Relating to the Device

This object is achieved by the features described in claim 9.

Some Advantages

When the process as claimed in claim 9 is used in a mobile network, the following advantages arise for the service user and network operator.

A mobile customer (service user) has a contract with the mobile network operator (service provider) which makes it possible to pay the accruing charges by bank collection by the mobile network operator. When the mobile customer decides to use an Internet service which is likewise offered by the mobile network operator, he must be registered for this service. After registration, the customer will be able to use the service using the access authorization. The use of the service is likewise settled by bank collection. In conjunction with the existing bank collection authorization, to protect the mobile customer and the mobile network operator, it is important to guarantee the authenticity of the identity of the registering service user to preclude abuse. The use of an ISDN network instead of a mobile network allows the same advantage.

The drawings show the invention, in part schematically, on one embodiment.

Reference number 1 labels a data input terminal as the first terminal device which is made here as a PC, while overall reference number 2 labels a service provider which comprises a registration server 3 and a short message service center as the message converter 4.

Reference number 5 labels a second terminal device which is made here as a mobile phone.

The data input terminal 1 as the first terminal device and the second terminal device 5 are both registered for the service user 6 at the service provider 2. This therefore means that the service provider 2 knows the personal data of the service user 6. Thus the terminal device 1 and the terminal device 5 are normally in the possession of the same service user 6.

The data input terminal 1 can be connected via a secure connection 7, for example a secure socket layer, to the registration server 3 of the service provider 2, while the second terminal device 5 can be connected to the message converter 4 via a connection 8, for example via a GSM mobile network or via ISDN or SUS.

The procedure is as follows:

Step 1:

The service user 6 connects via the first terminal device 1, therefore via the data input terminal 1, via the secure connection 7 to the registration server 3 which knows the personal data of the service user 6.

Step 2:

The registration server 3 transfers a still invalid password (identification number, TAN or the like) to the service user 6 to his data input terminal 1 via the same connection 7.

Step 3:

The service user 6 reads the password, the identification number, TAN or the like on his terminal device 1.

Step 4:

The service user 6 sends the password, identification number or the like which has been read according to step 3, via his second terminal device 5 over the connection 8, for example via a GSM mobile network, to the message converter 4.

Step 5:

The service provider 2 checks the password, the identification character or the like which has been sent over the connection 7 to the data input terminal 1 with the password or the like which has been received via the connection 8 from the service user 6. When they agree, the password, the identification character or the like becomes valid and the service user 6 can claim the service of the service provider 2, for example, on the Internet.

The registration server 3 and the message converter 4 can be spatially combined.

Furthermore, it is possible for the data input terminal 1 to relay the password, identification character or the like which has been received over the line 7 from the registration server 3 automatically via a second terminal device 5 and thus via the connection 8 to the message converter 4.

The features described in the abstract, in the claims, and in the specification and shown in the drawings can be significant for the implementation of the invention individually and also in any combinations.

REFERENCE NUMBER LIST

1 data input terminal, terminal device 1, PC
2 service provider
3 registration server
4 short message service center, message converter
5 terminal device, second; mobile device; data input terminal
6 service user
7 connection, secure
8 connection; GSM mobile network; ISDN; SUS
TAN transaction number

LITERATURE

  • DE 197 18 103 A1
  • DE 197 22 424 C1
  • WO 95/19593 A1

Claims (10)

The invention claimed is:
1. Process for establishing the authenticity of the identity of a service user relative to a service provider for release of an access authorization for a service, said process comprising:
establishing a secure first transmission path from a first terminal device, that is registered to the service user, to a registration service of the service provider;
transferring a request for an access identification character over the first transmission path from the first terminal device to the registration server;
sending an invalid access identification character over the first transmission path from the registration server to the first terminal device;
applying the invalid access identification character to a second terminal device which is registered to the service user;
after the operation of applying the invalid access identification character to a second terminal device, sending the invalid access identification character from the second terminal device over a second transmission path to a message converter of the service provider;
comparing the invalid access identification character received at the message converter with the invalid access identification character sent to the first terminal device; and
when the compared invalid access identification characters are the same, establishing validity of the invalid access identification character received at the message converter by releasing the invalid access identification character as valid.
2. Process as claimed in claim 1, further comprising invalidating the access identification character after a predetermined time interval.
3. Process as claimed in claim 1, further comprising allowing the service user to change the access identification character at any time after release of the access identification character.
4. Process as clamed in claim 1, further comprising invalidating the access identification character after a predetermined number of uses.
5. Process as claimed in claim 1, further comprising encrypting the request transferred from the first terminal device to the registration server.
6. Process as claimed in claim 1, further comprising encrypting the invalid access identification character sent from the registration server to the first terminal device.
7. Process as claimed in claim 1, wherein the invalid access identification character sent from the second terminal device to the message converter is transferred according to the GSM/SMS standard.
8. Process as claimed in claim 1, wherein the invalid access identification character sent from the second terminal device to the message converter is transferred via ISDN.
9. Device for executing the process as claimed in claim 1, comprising:
a first terminal device;
a registration server;
a message converter;
a secure wireless connection, over a secure socket layer, between the first terminal device and the registration server; and
a mobile connection in the GSM network between the second terminal device and the message converter.
10. Process for establishing the authenticity of the identity of a service user relative to a service provider for release of an access authorization for a service, said process comprising:
establishing a secure first transmission path from a first terminal device, that is registered to the service user, to a registration service of the service provider;
transferring a request for an access identification character over the first transmission path from the first terminal device to the registration server;
sending an invalid access identification character over the first transmission path from the registration server to the first terminal device in a first format;
applying the invalid access identification character to a second terminal device which is registered to the service user;
after the operation of applying the invalid access identification character to a second terminal device, sending the invalid access identification character from the second terminal device over a second transmission path to a message converter of the service provider in the first format;
comparing the invalid access identification character received at the message converter with the invalid access identification character sent to the first terminal device; and
when the compared invalid access identification characters are the same, establishing validity of the invalid access identification character received at the message converter by releasing the invalid access identification character as valid without changing the first format of the invalid access identification character received at the message converter.
US10204473 2000-02-21 2001-02-10 Method for establishing the authenticity of the identity of a service user and device for carrying out the method Expired - Fee Related US7865719B2 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
DE10007807 2000-02-21
DE10007807.9 2000-02-21
DE10007807 2000-02-21
PCT/EP2001/001469 WO2001062016A3 (en) 2000-02-21 2001-02-10 Method for establishing the authenticity of a service user and device for carrying out the method

Publications (2)

Publication Number Publication Date
US20030159031A1 true US20030159031A1 (en) 2003-08-21
US7865719B2 true US7865719B2 (en) 2011-01-04

Family

ID=7631680

Family Applications (1)

Application Number Title Priority Date Filing Date
US10204473 Expired - Fee Related US7865719B2 (en) 2000-02-21 2001-02-10 Method for establishing the authenticity of the identity of a service user and device for carrying out the method

Country Status (7)

Country Link
US (1) US7865719B2 (en)
JP (2) JP2003523569A (en)
DE (1) DE50112712D1 (en)
DK (1) DK1264490T3 (en)
EP (1) EP1264490B1 (en)
ES (1) ES2288509T3 (en)
WO (1) WO2001062016A3 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130125231A1 (en) * 2011-11-14 2013-05-16 Utc Fire & Security Corporation Method and system for managing a multiplicity of credentials
US8769299B1 (en) 2010-10-13 2014-07-01 The Boeing Company License utilization management system license wrapper

Families Citing this family (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1408391A1 (en) 2002-10-11 2004-04-14 Telefonaktiebolaget LM Ericsson (publ) Method of associating authentication information of a trusted device to an identifier of a non-trusted device
DE10325089A1 (en) * 2003-06-04 2004-12-30 Dom Sicherheitstechnik Gmbh & Co Kg A method for functional marrying the components of an authentication device and authentication device together
JP4049730B2 (en) * 2003-11-12 2008-02-20 シャープ株式会社 Data output device
FR2863131B1 (en) * 2003-11-28 2006-11-10 Yves Eonnet Process and control interface device interactive computer terminals
JP5095922B2 (en) * 2004-05-04 2012-12-12 ハイデルベルガー ドルツクマシーネン アクチエンゲゼルシヤフトHeidelberger Druckmaschinen AG Printing machine remote diagnosis system of
US7603700B2 (en) * 2004-08-31 2009-10-13 Aol Llc Authenticating a client using linked authentication credentials
GB0422132D0 (en) * 2004-10-06 2004-11-03 Sharp Kk Method and apparatus for performing a secure transaction in a trusted network
US20080235043A1 (en) * 2005-03-29 2008-09-25 Alexander Goulandris System and Method For Communicating Messages Between Users of a System
EP1878161B1 (en) * 2005-04-20 2010-12-01 Docaccount AB Method and system for electronic reauthentication of a communication party
KR101278074B1 (en) * 2005-05-11 2013-07-30 소니 주식회사 Server device, device-correlated registration method, and recording medium
EP2682890B1 (en) * 2005-08-30 2016-09-07 Passlogy Co., Ltd. Site check method
KR20080066811A (en) * 2005-10-21 2008-07-16 노키아 코포레이션 Apparatus, computer program product and method for secure authentication response in a mobile terminal
US20070239621A1 (en) * 2006-04-11 2007-10-11 Igor Igorevich Stukanov Low cost, secure, convenient, and efficient way to reduce the rate of fraud in financial and communication transaction systems
WO2008122923A3 (en) * 2007-04-05 2008-12-18 Ibm System and method for distribution of credentials
EP2056565A1 (en) * 2007-10-29 2009-05-06 Axalto Method of authenticating a user accessing a remote server from a computer
US9563751B1 (en) * 2010-10-13 2017-02-07 The Boeing Company License utilization management system service suite
JP2015018473A (en) 2013-07-12 2015-01-29 ブラザー工業株式会社 Program of registration server, information device, program of information device, and network system
DE102014224427A1 (en) 2014-11-28 2016-06-02 Tien Hung Nguyen A method of secure authentication of a user by a service provider

Citations (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5732137A (en) * 1994-06-03 1998-03-24 Sun Microsystems, Inc. Method and apparatus for secure remote authentication in a public network
DE19722424C1 (en) 1997-05-28 1998-08-06 Ericsson Telefon Ab L M Secure access method
US5875394A (en) 1996-12-27 1999-02-23 At & T Wireless Services Inc. Method of mutual authentication for secure wireless service provision
US5881226A (en) * 1996-10-28 1999-03-09 Veneklase; Brian J. Computer security system
JP2000010927A (en) 1998-06-25 2000-01-14 Nec Yonezawa Ltd Authentication system and device
JP2000188616A (en) 1998-12-21 2000-07-04 Matsushita Commun Ind Co Ltd Communication system and communication method
US6112078A (en) * 1996-02-23 2000-08-29 Nokia Mobile Phones, Ltd. Method for obtaining at least one item of user authentication data
JP2000312267A (en) 1999-02-25 2000-11-07 Akita Yasuo Mobile communication object system
US6230272B1 (en) * 1997-10-14 2001-05-08 Entrust Technologies Limited System and method for protecting a multipurpose data string used for both decrypting data and for authenticating a user
US6237093B1 (en) * 1997-06-30 2001-05-22 Sonera Oyj Procedure for setting up a secure service connection in a telecommunication system
US6427071B1 (en) * 1998-12-08 2002-07-30 At&T Wireless Services, Inc. Apparatus and method for providing transporting for a control signal
US20030005144A1 (en) * 1998-10-28 2003-01-02 Robert Engel Efficient classification manipulation and control of network transmissions by associating network flows with rule based functions

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5668876A (en) * 1994-06-24 1997-09-16 Telefonaktiebolaget Lm Ericsson User authentication method and apparatus
JP2000019927A (en) * 1998-06-29 2000-01-21 Canon Inc Image forming device

Patent Citations (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5732137A (en) * 1994-06-03 1998-03-24 Sun Microsystems, Inc. Method and apparatus for secure remote authentication in a public network
US6112078A (en) * 1996-02-23 2000-08-29 Nokia Mobile Phones, Ltd. Method for obtaining at least one item of user authentication data
US5881226A (en) * 1996-10-28 1999-03-09 Veneklase; Brian J. Computer security system
US5875394A (en) 1996-12-27 1999-02-23 At & T Wireless Services Inc. Method of mutual authentication for secure wireless service provision
DE19722424C1 (en) 1997-05-28 1998-08-06 Ericsson Telefon Ab L M Secure access method
US6237093B1 (en) * 1997-06-30 2001-05-22 Sonera Oyj Procedure for setting up a secure service connection in a telecommunication system
US6230272B1 (en) * 1997-10-14 2001-05-08 Entrust Technologies Limited System and method for protecting a multipurpose data string used for both decrypting data and for authenticating a user
JP2000010927A (en) 1998-06-25 2000-01-14 Nec Yonezawa Ltd Authentication system and device
US20030005144A1 (en) * 1998-10-28 2003-01-02 Robert Engel Efficient classification manipulation and control of network transmissions by associating network flows with rule based functions
US6427071B1 (en) * 1998-12-08 2002-07-30 At&T Wireless Services, Inc. Apparatus and method for providing transporting for a control signal
JP2000188616A (en) 1998-12-21 2000-07-04 Matsushita Commun Ind Co Ltd Communication system and communication method
US6708200B1 (en) 1998-12-21 2004-03-16 Matsushita Electric Industrial Co., Ltd. Communication system and communication method
JP2000312267A (en) 1999-02-25 2000-11-07 Akita Yasuo Mobile communication object system

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8769299B1 (en) 2010-10-13 2014-07-01 The Boeing Company License utilization management system license wrapper
US20130125231A1 (en) * 2011-11-14 2013-05-16 Utc Fire & Security Corporation Method and system for managing a multiplicity of credentials

Also Published As

Publication number Publication date Type
DK1264490T3 (en) 2007-10-08 grant
WO2001062016A3 (en) 2002-02-14 application
DE50112712D1 (en) 2007-08-23 grant
ES2288509T3 (en) 2008-01-16 grant
JP2006318489A (en) 2006-11-24 application
EP1264490B1 (en) 2007-07-11 grant
US20030159031A1 (en) 2003-08-21 application
WO2001062016A2 (en) 2001-08-23 application
JP2003523569A (en) 2003-08-05 application
EP1264490A2 (en) 2002-12-11 application

Similar Documents

Publication Publication Date Title
US7142840B1 (en) Method and system for multi-network authorization and authentication
US7043230B1 (en) Method and system for multi-network authorization and authentication
US20080040274A1 (en) Method of making secure electronic payments using communications devices and biometric data
US20080098225A1 (en) System and method for authenticating remote server access
US6259909B1 (en) Method for securing access to a remote system
US6490687B1 (en) Login permission with improved security
US7188360B2 (en) Universal authentication mechanism
US7221949B2 (en) Method and system for enhanced security using location-based wireless authentication
US20090234760A1 (en) Transaction authorisation system and method
US20020187808A1 (en) Method and arrangement for encrypting data transfer at an interface in mobile equipment in radio network, and mobile equipment in radio network
EP1102157A1 (en) Method and arrangement for secure login in a telecommunications system
US20050021982A1 (en) Hybrid authentication
US20110103586A1 (en) System, Method and Device To Authenticate Relationships By Electronic Means
US20040172536A1 (en) Method for authentication between a portable telecommunication object and a public access terminal
US20040199764A1 (en) Method for authentication of a user on access to a software-based system by means of an access medium
US20020186845A1 (en) Method and apparatus for remotely disabling and enabling access to secure transaction functions of a mobile terminal
US20030061503A1 (en) Authentication for remote connections
US20050066179A1 (en) Method and apparatus for authenticating a user at an access terminal
US20050103839A1 (en) Authorization means security module terminal system
US20060294387A1 (en) Method of controlling access
US20050120202A1 (en) Use of a public key key pair in the terminal for authentication and authorization of the telecommunication user with the network operator and business partners
US20080046988A1 (en) Authentication Method
US8151328B1 (en) Accessing secure network areas by utilizing mobile-device authentication
US8037511B1 (en) Utilizing a mobile device to operate an electronic locking mechanism
US6112078A (en) Method for obtaining at least one item of user authentication data

Legal Events

Date Code Title Description
AS Assignment

Owner name: E-PLUS MOBILFUNK GMBH & CO. KG, GERMANY

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:MULLER, CHRISTIAN;TROLIN, ALEXIS;ERGEZINGER, SIEGFRIED;AND OTHERS;REEL/FRAME:013968/0079;SIGNING DATES FROM 20021021 TO 20021122

Owner name: E-PLUS MOBILFUNK GMBH & CO. KG, GERMANY

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:MULLER, CHRISTIAN;TROLIN, ALEXIS;ERGEZINGER, SIEGFRIED;AND OTHERS;SIGNING DATES FROM 20021021 TO 20021122;REEL/FRAME:013968/0079

REMI Maintenance fee reminder mailed
LAPS Lapse for failure to pay maintenance fees
FP Expired due to failure to pay maintenance fee

Effective date: 20150104